-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
http://reviewboard-openlmi.rhcloud.com/r/1924/
-----------------------------------------------------------
(Updated Úno. 16, 2015, 3:28 odp.)
Status
------
This change has been marked as submitted.
Review request for OpenLMI Developers.
Repository: openlmi-storage
Description
-------
Add polkit integration.
The polkit actions are taken from storaged and udisks, just with
org.openlmi.storage prefix. This allows us to experiment with existing
authorization schemes and identify problems in storaged and udisks.
The storage provider itself still runs as root, but is asks polkit
to authorize each action. Since polkit authorizes processes and not
users, we must spawn a little helper process under UID of the remote user
to check the authorization, see lmi.storage.util.polkit module. There is one
fork and several execs involved in each policy check.
Diffs
-----
MANIFEST.in 6b6d42c5adb2ab59c8c9562029508ff6498392f6
openlmi-storage.spec a9226e01cfe6530cf40f9efe0629703c01a4144f
org.openlmi.storage.policy PRE-CREATION
pycmpiLMI_Storage-cimprovagt 267447e284c78821be5f8a95fefa6b547e0e8044
src/lmi/storage/LMI_DiskPartitioningConfigurationService.py
9417d2abe012d7ad46e603d5f9dc00c98e3a9b56
src/lmi/storage/LMI_ExtentEncryptionConfigurationService.py
cd8fd1b1f0bd2c8d5e466ee5679800dc39ad324d
src/lmi/storage/LMI_FileSystemConfigurationService.py
f6e21cdacaea091519cda5a744973076ea36a158
src/lmi/storage/LMI_MountConfigurationService.py
a08935d26d459bf97ef6cc115c392ae0bfe7e54d
src/lmi/storage/LMI_StorageConfigurationService.py
bf98619646d768a831cb00bd0bd99ed2a607f816
src/lmi/storage/util/polkit.py PRE-CREATION
Diff:
http://reviewboard-openlmi.rhcloud.com/r/1924/diff/
Testing
-------
Thanks,
Jan Safranek